ci2 starts bisection 2023-01-28 13:33:14.27222489 +0000 UTC m=+431085.252808297 bisecting fixing commit since 6d36c728bc2e2d632f4b0dea00df5532e20dfdab building syzkaller on 63e790dd3617b22ee48ea791ee759e27ac140bbf ensuring issue is reproducible on original commit 6d36c728bc2e2d632f4b0dea00df5532e20dfdab testing commit 6d36c728bc2e2d632f4b0dea00df5532e20dfdab gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 2d668cd39050b0f86adaeac18c46693d062aa6d2193926d84ac512b351238ddb run #0: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #1: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #2: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #3: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #4: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #5: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #6: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #7: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #8: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #9: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #10: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #11: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #12: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #13: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #14: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #15: crashed: SYZFATAL: executor failed NUM times: executor NUM: failed to write control pipe: write |NUM: broken pipe run #16: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #17: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #18: crashed: UBSAN: shift-out-of-bounds in dbFindCtl run #19: crashed: SYZFATAL: executor failed NUM times: executor NUM: exit status NUM testing current HEAD 5af6ce7049365952f7f023155234fe091693ead1 testing commit 5af6ce7049365952f7f023155234fe091693ead1 gcc compiler: Debian clang version 13.0.1-6~deb11u1, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: bd4ecf7696a7d4842db9b9ea91bfa2762adacf43ebcd90dda1a7c295d5b8585a all runs: crashed: UBSAN: shift-out-of-bounds in dbMount revisions tested: 2, total time: 42m20.558380317s (build: 32m43.761531897s, test: 7m0.783682444s) the crash still happens on HEAD commit msg: Merge tag '6.2-rc5-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6 crash: UBSAN: shift-out-of-bounds in dbMount loop0: detected capacity change from 0 to 32768 ================================================================================ UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:201:29 shift exponent -1 is negative CPU: 1 PID: 5583 Comm: syz-executor.0 Not tainted 6.2.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x12a/0x1c0 lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_shift_out_of_bounds+0x222/0x250 lib/ubsan.c:321 dbMount+0x937/0x940 fs/jfs/jfs_dmap.c:201 jfs_mount+0x197/0x690 fs/jfs/jfs_mount.c:121 jfs_fill_super+0x53e/0xad0 fs/jfs/super.c:556 mount_bdev+0x27a/0x370 fs/super.c:1359 legacy_get_tree+0xe4/0x170 fs/fs_context.c:610 vfs_get_tree+0x7b/0x220 fs/super.c:1489 do_new_mount+0x1df/0x930 fs/namespace.c:3145 do_mount fs/namespace.c:3488 [inline] __do_sys_mount fs/namespace.c:3697 [inline] __se_sys_mount+0x20f/0x2a0 fs/namespace.c:3674 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f12d2e8cada Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f12d3f30f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f12d2e8cada RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f12d3f30fe0 RBP: 00007f12d3f31020 R08: 00007f12d3f31020 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f12d3f30fe0 R15: 0000000020005980 ================================================================================